Microsoft's 'Gazelle' Browser Concept Going on Tour

Why can't a Web browser be more like an operating system? That's a question being investigated with "Gazelle," an ongoing project at Microsoft Research.

Microsoft plans to describe Gazelle in greater detail next month at the Usenix Security Symposium in Montreal, according to an article published this week at the Microsoft Research Web site. Usenix is a computer security conference for academic researchers.

Gazelle is pure research led by Helen J. Wang of Microsoft Research in Redmond, Wash. She and her colleagues published a paper in February explaining the construction of the Gazelle Web browser. The paper critiques security handling by both Internet Explorer 8 and Google's Chrome browser. Gazelle will seek a different approach -- one in which the browser acts more like an operating system to control processes.

The essence of Gazelle is its "browser kernel" concept, which will handle interactions more securely, much as an operating system does with applications. The browser kernel consists of approximately 5,000 lines of C# code and is "resilient to memory attacks," according to the authors of the paper.

"Gazelle is all about constructing the browser as a multi-principal OS: How should a browser-based OS provide protection and resource management to its applications?" the Microsoft Research article explains.

In Gazelle parlance, the word "multi-principal" refers to the various Web sites that the browser has to handle all at once. The browser kernel in Gazelle treats all such principals as potentially hostile elements. It isolates them so that a Web site or component won't crash the browser.

The Microsoft Research article emphasizes that Gazelle is still at the research stage; Microsoft doesn't have a "product prototype." However, such research does tend to find its way into Microsoft's products.

Rick Rashid, senior vice president at Microsoft Research, claims that the organization's work has "influenced virtually every product the company has developed." Microsoft pours "as much as 17 percent of its total annual revenues" into research and development, Rashid explained.

Featured

This week saw two third-party vendors of dev tools -- UX and UI toolkits and controls -- release new offerings that include support for two of Microsoft's main open source frameworks, the cross-platform .NET Core 3.1 and Blazor, which allows for creating browser-based web applications with C# instead of JavaScript.

Clustering non-numeric -- or categorial -- data is surprisingly difficult, but it's explained here by resident data scientist Dr. James McCaffrey of Microsoft Research, who provides all the code you need for a complete system using an algorithm based on a metric called category utility (CU), a measure how much information you gain by clustering.